Pablo Neira Ayuso d0009effa8 netfilter: nf_tables: validate NFPROTO_* family
Several expressions explicitly refer to NF_INET_* hook definitions
from expr->ops->validate, however, family is not validated.

Bail out with EOPNOTSUPP in case they are used from unsupported
families.

Fixes: 0ca743a55991 ("netfilter: nf_tables: add compatibility layer for x_tables")
Fixes: a3c90f7a2323 ("netfilter: nf_tables: flow offload expression")
Fixes: 2fa841938c64 ("netfilter: nf_tables: introduce routing expression")
Fixes: 554ced0a6e29 ("netfilter: nf_tables: add support for native socket matching")
Fixes: ad49d86e07a4 ("netfilter: nf_tables: Add synproxy support")
Fixes: 4ed8eb6570a4 ("netfilter: nf_tables: Add native tproxy support")
Fixes: 6c47260250fc ("netfilter: nf_tables: add xfrm expression")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2024-01-24 20:02:40 +01:00
..
2023-10-01 19:09:54 +01:00
2024-01-18 11:37:24 -08:00
2023-12-15 16:25:55 -08:00
2023-12-26 20:31:01 +00:00
2024-01-11 10:07:29 -08:00
2023-12-29 07:46:38 +00:00
2024-01-03 18:37:22 -08:00
2024-01-19 21:30:09 -08:00
2024-01-23 08:38:13 -08:00
2024-01-04 10:29:18 +00:00
2024-01-11 14:19:23 -08:00
2024-01-23 08:38:13 -08:00
2023-12-26 20:31:01 +00:00
2023-12-18 16:46:08 -08:00
2023-12-12 14:24:14 +01:00
2024-01-04 10:23:10 -08:00
2024-01-04 10:23:10 -08:00
2024-01-08 11:43:04 -08:00